GCVE-110-NCSC-2024-474

Advisory Published

Vulnetix · Advisory published December 10, 2024

Drupal heeft kwetsbaarheden verholpen in Drupal Core (Specifiek voor versies 7.0 tot 7.102, 8.0.0 tot voor 10.2.11, 10.3.0 tot voor 10.3.9, en 11.0.0 tot voor 11.0.8).

Download JSON Open in Console

Weaknesses (CWE)

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-289Authentication Bypass by Alternate NameCWE-915Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected Products

Vendor	Product	Versions	Platforms
open_source	drupal	—	—

Aliases

CVE-2024-12393 CVE-2024-55634 CVE-2024-55635 CVE-2024-55636 CVE-2024-55637 CVE-2024-55638

References

advisory

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON